HIPAA compliance assessment at a senior living health system

Challenge

A senior living health system sought an assessment of their policies and procedures compared with the HIPAA Security Rule. The organization had begun to examine their compliance with this rule, but needed objective assistance to assess their policies, procedures, and practices against the rule’s requirements.

Solution

BerryDunn’s advisors:

• Performed a HIPAA Gap Assessment and Risk Analysis
• Helped the client understand gaps, identify priorities, and plan their mitigation steps
• Conducted a mock OCR HIPAA Audit to assess the organization’s readiness for a future audit and to confirm the effectiveness of their controls

Outcome

With an increased awareness of IT security and gaps in compliance, the client developed a sustainable approach to implementing the HIPAA specifications. They prioritized BerryDunn’s recommendations and implemented controls to mitigate their risk of HIPAA violations. They have completed repeated assessments to continue to strengthen their privacy and security year after year and improve their readiness for an OCR audit.